Stack category
European Identity & Access Management
Identity and access management (IAM) is the layer that knows who your users are: login, single sign-on, multi-factor authentication, and authorization.
Why this layer matters for sovereignty
Your identity provider stores credentials, session tokens, MFA secrets, and IP addresses for every user — the single most sensitive data store in most stacks.
It is the trust anchor: whoever controls authentication can impersonate any user of your product.
Standards-first open-source IAM (OIDC, SAML) means your integration survives a vendor swap — identity lock-in is the hardest kind to escape.
What to look for
Open standards: OpenID Connect and SAML, not a proprietary SDK.
Passkey/WebAuthn support — phishing-resistant MFA is the current state of the art.
Social login federation without shipping your users' data to a US broker.
For self-hosting: managed complexity is real; a well-documented upgrade path matters more than feature lists.
European & open-source identity & security providers
Curated as part of the European Stack Builder. Badges reflect the organization's origin — EU, EEA, EFTA, and UK count as European.
Identity management solution that extends Keycloak with authorization modules
Zero-trust networking platform building on WireGuard-based mesh
Identity platform with focus on multi-tenancy and B2B features
Frequently asked questions
What is identity and access management?
IAM covers everything that decides who can do what: registration, login, password and passkey handling, multi-factor authentication, single sign-on, and authorization (roles, permissions, groups). Products like Keycloak and Zitadel implement the OpenID Connect and SAML standards that let one login work across all your apps.
What are European alternatives to Auth0 and Okta?
Open-source and European IAM options include Keycloak and Zitadel (both open source), cidaas and Bare.ID, Cloud IAM (managed Keycloak), Hanko (passkey-first), NetBird for zero-trust network access, and Login-Master for Keycloak-based enterprise setups.
What is single sign-on (SSO)?
SSO lets a user authenticate once and access every connected application. The identity provider issues standardized tokens (usually OpenID Connect) that each app verifies, so credentials live in one hardened system instead of in every service.
Pick your Identity & Security
Compare these providers side by side and assemble your full sovereign stack.
Open the Stack Builder